CVE-2025-65474
EUVD-2025-20276711.12.2025, 17:15
An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| easyimages2.0_project | easyimages2.0 | 𝑥 ≤ 2.8.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-706 - Use of Incorrectly-Resolved Name or ReferenceThe software uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
- CWE-434 - Unrestricted Upload of File with Dangerous TypeThe software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.